Thanks for that. I was building containers pre docker but didn't know about unshare. I'm going to play around with this.

I've heard of jails but haven't used BSD enough to ever use them. (And I'm not old enough to have ever mucked with zones. My Solaris boat anchors were just toys for a teen collector.)